Description
The (1) NSID_SHUFFLE_ONLY and (2) NSID_USE_POOL PRNG algorithms in ISC BIND 8 before 8.4.7-P1 generate predictable DNS query identifiers when sending outgoing queries such as NOTIFY messages when answering questions as a resolver, which allows remote attackers to poison DNS caches via unknown vectors. NOTE: this issue is different from CVE-2007-2926.
Published: 2007-09-12
Score: 4.3 Medium
EPSS: 29.9% Moderate
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

References
Link Providers
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01283837 cve-icon cve-icon
http://secunia.com/advisories/26629 cve-icon cve-icon
http://secunia.com/advisories/26858 cve-icon cve-icon
http://secunia.com/advisories/27433 cve-icon cve-icon
http://secunia.com/advisories/27459 cve-icon cve-icon
http://secunia.com/advisories/27465 cve-icon cve-icon
http://secunia.com/advisories/27696 cve-icon cve-icon
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103063-1 cve-icon cve-icon
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200859-1 cve-icon cve-icon
http://support.avaya.com/elmodocs2/security/ASA-2007-448.htm cve-icon cve-icon
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=653968 cve-icon cve-icon
http://www.ciac.org/ciac/bulletins/r-333.shtml cve-icon cve-icon
http://www.isc.org/index.pl?/sw/bind/bind8-eol.php cve-icon cve-icon
http://www.kb.cert.org/vuls/id/927905 cve-icon cve-icon
http://www.securityfocus.com/archive/1/477870/100/100/threaded cve-icon cve-icon
http://www.securityfocus.com/archive/1/481424/100/0/threaded cve-icon cve-icon
http://www.securityfocus.com/archive/1/481659/100/0/threaded cve-icon cve-icon
http://www.securityfocus.com/bid/25459 cve-icon cve-icon
http://www.securitytracker.com/id?1018615 cve-icon cve-icon
http://www.trusteer.com/docs/bind8dns.html cve-icon cve-icon
http://www.vupen.com/english/advisories/2007/2991 cve-icon cve-icon
http://www.vupen.com/english/advisories/2007/3192 cve-icon cve-icon
http://www.vupen.com/english/advisories/2007/3639 cve-icon cve-icon
http://www.vupen.com/english/advisories/2007/3668 cve-icon cve-icon
http://www.vupen.com/english/advisories/2007/3936 cve-icon cve-icon
http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2007/43/022954-01.pdf cve-icon cve-icon
http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3975 cve-icon cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2154 cve-icon cve-icon
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: certcc

Published:

Updated: 2024-08-07T13:57:54.637Z

Reserved: 2007-05-30T00:00:00.000Z

Link: CVE-2007-2930

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2007-09-12T01:17:00.000

Modified: 2026-04-23T00:35:47.467

Link: CVE-2007-2930

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses